From 9cc1c7216921c9173166eff95cfa62e520d28324 Mon Sep 17 00:00:00 2001 From: Alex Goodman Date: Mon, 18 Apr 2022 14:22:58 -0400 Subject: [PATCH] Preserve package IDs on Syft JSON SBOM decode (#731) --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 088acaa4693..605a7820cdc 100644 --- a/go.mod +++ b/go.mod @@ -10,7 +10,7 @@ require ( github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4 github.com/anchore/packageurl-go v0.1.1-0.20220314153042-1bcd40e5206b github.com/anchore/stereoscope v0.0.0-20220406160859-c03a18a6b270 - github.com/anchore/syft v0.44.0 + github.com/anchore/syft v0.44.2-0.20220418181055-172ecc0d777d github.com/bmatcuk/doublestar/v2 v2.0.4 github.com/docker/docker v20.10.12+incompatible github.com/dustin/go-humanize v1.0.0 diff --git a/go.sum b/go.sum index a308bbc2182..54d7535abda 100644 --- a/go.sum +++ b/go.sum @@ -155,8 +155,8 @@ github.com/anchore/packageurl-go v0.1.1-0.20220314153042-1bcd40e5206b h1:YJWYt/6 github.com/anchore/packageurl-go v0.1.1-0.20220314153042-1bcd40e5206b/go.mod h1:Blo6OgJNiYF41ufcgHKkbCKF2MDOMlrqhXv/ij6ocR4= github.com/anchore/stereoscope v0.0.0-20220406160859-c03a18a6b270 h1:NmxPDR6vo3xjwCL6o+tpF1vUad/BVo+WaVSwueB9W9w= github.com/anchore/stereoscope v0.0.0-20220406160859-c03a18a6b270/go.mod h1:yoCLUZY0k/pYLNIy0L80p2Ko0PKVNXm8rHtgxp4OiSc= -github.com/anchore/syft v0.44.0 h1:HlaWN2yLbj4Of0fATK/72BmDPMwRrQBWZ/HUmVthnj8= -github.com/anchore/syft v0.44.0/go.mod h1:m6/cWOz0aFbCL0pflHvvBgvw0qMPLVqDQa0L8+FBPVE= +github.com/anchore/syft v0.44.2-0.20220418181055-172ecc0d777d h1:28Wt0BKBDUg/JQLwCAPdERXKnOez7pvjRZrEJwqh2iE= +github.com/anchore/syft v0.44.2-0.20220418181055-172ecc0d777d/go.mod h1:m6/cWOz0aFbCL0pflHvvBgvw0qMPLVqDQa0L8+FBPVE= github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883/go.mod h1:rCTlJbsFo29Kk6CurOXKm700vrz8f0KW0JNfpkRJY/8= github.com/andybalholm/brotli v1.0.1/go.mod h1:loMXtMfwqflxFJPmdbJO0a3KNoPuLBgiu3qAvBg8x/Y= github.com/andybalholm/brotli v1.0.2/go.mod h1:loMXtMfwqflxFJPmdbJO0a3KNoPuLBgiu3qAvBg8x/Y=